From 02e42958f04ba23ab97ee13d803cc45fde20e30f Mon Sep 17 00:00:00 2001 From: Uli Schlachter Date: Fri, 13 Jan 2012 20:57:10 +0100 Subject: [PATCH] Make certs valid for 10 years Previously, a certificate generated with --makepem expired after a year which is weird and pointless (come on, it's self-signed!). Signed-off-by: Uli Schlachter --- src/Utils.cpp | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/Utils.cpp b/src/Utils.cpp index 20632dcb..e205c00a 100644 --- a/src/Utils.cpp +++ b/src/Utils.cpp @@ -34,6 +34,7 @@ void CUtils::GenerateCert(FILE *pOut, const CString& sHost) { X509 *pCert = NULL; X509_NAME *pName = NULL; const int days = 365; + const int years = 10; u_int iSeed = time(NULL); int serial = (rand_r(&iSeed) % 9999); @@ -55,7 +56,7 @@ void CUtils::GenerateCert(FILE *pOut, const CString& sHost) { X509_set_version(pCert, 2); ASN1_INTEGER_set(X509_get_serialNumber(pCert), serial); X509_gmtime_adj(X509_get_notBefore(pCert), 0); - X509_gmtime_adj(X509_get_notAfter(pCert), (long)60*60*24*days); + X509_gmtime_adj(X509_get_notAfter(pCert), (long)60*60*24*days*years); X509_set_pubkey(pCert, pKey); pName = X509_get_subject_name(pCert);